$ rpki-client -vvf rpki-rsync.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/D85DDCBE5BD75A50DB0F9F9916123BE97CC8E01A.mft File: D85DDCBE5BD75A50DB0F9F9916123BE97CC8E01A.mft (raw, json) Hash identifier: B7x/kTZkCUziRjV8/U2Zr3HYGg/h6s/AMmjFEDwCjW8= Subject key identifier: 03:0E:5F:E5:CB:D0:37:36:90:B6:FB:41:05:B9:E2:F4:D5:82:33:82 Authority key identifier: D8:5D:DC:BE:5B:D7:5A:50:DB:0F:9F:99:16:12:3B:E9:7C:C8:E0:1A Certificate issuer: /CN=D85DDCBE5BD75A50DB0F9F9916123BE97CC8E01A Certificate serial: 12D83515FDA6E391CB278C8D9C208DD8A2054407 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D85DDCBE5BD75A50DB0F9F9916123BE97CC8E01A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/D85DDCBE5BD75A50DB0F9F9916123BE97CC8E01A.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 03:32:07 +0000 Manifest this update: Wed 17 Jun 2026 03:27:07 +0000 Manifest next update: Thu 18 Jun 2026 06:30:07 +0000 Files and hashes: 1: D85DDCBE5BD75A50DB0F9F9916123BE97CC8E01A.crl (hash: 36ZpzHwEi4aW8J3to2Lj0hFDNaWeDq4nutC1HZ1Jwg8=) 2: 3130332e3137342e31342e302f32332d3234203d3e20313439333532.roa (hash: Y/EQKcpkANIA0psSjIaznqwzitz7bm3TFARBNjc3Kms=) 3: 323030313a6466303a6134303a3a2f34382d3438203d3e20313439333532.roa (hash: oPoNFbylWE3wDnquzh9cCts/g1mAJ32eRWzuqQ1Bx0w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/D85DDCBE5BD75A50DB0F9F9916123BE97CC8E01A.crl rsync://rpki-rsync.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/D85DDCBE5BD75A50DB0F9F9916123BE97CC8E01A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D85DDCBE5BD75A50DB0F9F9916123BE97CC8E01A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:d8:35:15:fd:a6:e3:91:cb:27:8c:8d:9c:20:8d:d8:a2:05:44:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D85DDCBE5BD75A50DB0F9F9916123BE97CC8E01A Validity Not Before: Jun 17 03:27:07 2026 GMT Not After : Jun 18 06:30:07 2026 GMT Subject: CN=030E5FE5CBD0373690B6FB4105B9E2F4D5823382 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:95:8b:12:aa:c1:58:52:ae:91:18:d5:4e:78: 2a:d2:20:1f:7a:59:e2:a4:80:72:29:a3:22:fa:8e: ef:8f:2f:ce:db:68:1a:32:c2:31:dd:b6:73:53:e2: 2e:43:d4:7e:98:d7:be:a7:89:87:5c:7a:29:d6:67: 42:92:c4:11:0b:ae:b4:8c:85:f1:55:7d:8a:39:5a: 9c:9a:7e:c6:f7:56:48:11:dc:50:17:8c:d8:3c:78: d6:01:8c:90:5a:bd:2a:1c:44:77:07:15:a4:b6:92: ab:5c:1a:70:8c:f7:d3:c8:db:18:ca:de:e1:3d:84: 5c:28:eb:4f:f3:68:1a:a0:9a:72:dd:94:f8:8f:37: d9:38:49:c2:19:3f:ba:70:39:82:fc:ce:35:f6:89: e8:18:56:61:7d:be:9f:12:97:98:2b:08:3d:ed:80: f9:e7:56:bc:24:cf:a6:4e:39:ea:a4:74:64:3d:10: 85:3c:ba:ea:15:82:a1:dd:23:6f:9b:5f:d5:33:8d: 52:d1:57:f9:fd:ca:bb:54:ac:b3:f6:25:e3:02:63: 18:6c:4c:09:ce:ec:48:eb:ff:80:cc:31:bb:b0:43: ae:19:55:43:d5:86:8e:ad:6d:a9:54:c5:07:cb:c3: 65:6b:e9:4b:16:30:7e:c5:f0:d7:5e:3d:3f:c8:5e: 47:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:0E:5F:E5:CB:D0:37:36:90:B6:FB:41:05:B9:E2:F4:D5:82:33:82 X509v3 Authority Key Identifier: keyid:D8:5D:DC:BE:5B:D7:5A:50:DB:0F:9F:99:16:12:3B:E9:7C:C8:E0:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/D85DDCBE5BD75A50DB0F9F9916123BE97CC8E01A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D85DDCBE5BD75A50DB0F9F9916123BE97CC8E01A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/D85DDCBE5BD75A50DB0F9F9916123BE97CC8E01A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:9c:16:91:54:6b:aa:3f:3a:97:2f:f8:15:a4:75:90:2a:6d: 2c:d1:9a:b4:72:61:3e:a7:d0:4f:0e:ee:84:f4:66:fb:ca:a8: f9:fd:e4:0c:b8:dc:9e:36:bb:ae:1b:91:35:5d:ab:21:d2:ef: a8:6c:00:9a:52:f9:d1:bc:40:30:0a:8c:4c:04:75:52:f4:d7: b6:f9:24:62:26:a5:42:75:cd:e8:80:b9:ac:15:bd:2e:a8:20: e3:8d:7c:e8:dc:9f:81:f6:dd:00:97:22:a0:6f:26:18:a6:6e: 97:43:73:57:9c:2a:5c:4f:14:ee:45:b0:38:18:f6:69:9d:15: a2:3c:11:83:2d:d0:40:7d:e3:01:cb:07:b2:05:74:27:35:95: b0:e4:f9:9d:8b:33:a6:24:11:e1:4a:d3:7b:7e:2f:d1:0e:2a: aa:9c:bb:52:43:d7:f8:cd:6b:c2:9e:5d:ec:58:3f:92:43:ac: cf:72:43:a4:43:32:fe:f2:98:c6:c6:7d:46:6b:04:40:e0:e5: 8d:46:41:b6:d8:9d:7c:72:04:9e:51:3c:0d:52:a7:7e:57:be: 3e:dd:8a:9f:f4:30:d0:b4:b3:67:fc:26:56:31:60:4b:8e:06: e3:d5:d1:07:d8:ed:6b:eb:78:41:44:c1:91:b8:88:56:88:6b: 2d:65:08:05 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEtg1Ff2m45HLJ4yNnCCN2KIFRAcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDg1RERDQkU1QkQ3NUE1MERCMEY5Rjk5MTYxMjNCRTk3 Q0M4RTAxQTAeFw0yNjA2MTcwMzI3MDdaFw0yNjA2MTgwNjMwMDdaMDMxMTAvBgNV BAMTKDAzMEU1RkU1Q0JEMDM3MzY5MEI2RkI0MTA1QjlFMkY0RDU4MjMzODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCalYsSqsFYUq6RGNVOeCrSIB96 WeKkgHIpoyL6ju+PL87baBoywjHdtnNT4i5D1H6Y176niYdceinWZ0KSxBELrrSM hfFVfYo5Wpyafsb3VkgR3FAXjNg8eNYBjJBavSocRHcHFaS2kqtcGnCM99PI2xjK 3uE9hFwo60/zaBqgmnLdlPiPN9k4ScIZP7pwOYL8zjX2iegYVmF9vp8Sl5grCD3t gPnnVrwkz6ZOOeqkdGQ9EIU8uuoVgqHdI2+bX9UzjVLRV/n9yrtUrLP2JeMCYxhs TAnO7Ejr/4DMMbuwQ64ZVUPVho6tbalUxQfLw2Vr6UsWMH7F8NdePT/IXkfHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAw5f5cvQNzaQtvtBBbni9NWCM4IwHwYDVR0j BBgwFoAU2F3cvlvXWlDbD5+ZFhI76XzI4BowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWVhYjBhMDEtOGVlNC00ODI1LTg0MGQtMTEyZGFlZjBhY2E4LzAvRDg1RERDQkU1 QkQ3NUE1MERCMEY5Rjk5MTYxMjNCRTk3Q0M4RTAxQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EODVERENCRTVCRDc1QTUwREIwRjlGOTkxNjEyM0JFOTdDQzhF MDFBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWVhYjBhMDEtOGVlNC00ODI1LTg0 MGQtMTEyZGFlZjBhY2E4LzAvRDg1RERDQkU1QkQ3NUE1MERCMEY5Rjk5MTYxMjNC RTk3Q0M4RTAxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIKcFpFUa6o/Opcv+BWkdZAqbSzRmrRyYT6n 0E8O7oT0ZvvKqPn95Ay43J42u64bkTVdqyHS76hsAJpS+dG8QDAKjEwEdVL017b5 JGImpUJ1zeiAuawVvS6oIOONfOjcn4H23QCXIqBvJhimbpdDc1ecKlxPFO5FsDgY 9mmdFaI8EYMt0EB94wHLB7IFdCc1lbDk+Z2LM6YkEeFK03t+L9EOKqqcu1JD1/jN a8KeXexYP5JDrM9yQ6RDMv7ymMbGfUZrBEDg5Y1GQbbYnXxyBJ5RPA1Sp35Xvj7d ip/0MNC0s2f8JlYxYEuOBuPV0QfY7WvreEFEwZG4iFaIay1lCAU= -----END CERTIFICATE-----Generated at Wed Jun 17 10:42:35 2026 by rpki-client